Add test for subca in ipa clone

.github/workflows/ipa-clone-test.yml

@@ -544,6 +544,27 @@ jobs:
               --pkcs12-password Secret.123
           docker exec secondary pki -n ipa-ca-agent ca-user-show admin
 
+      - name: Check subca replication from primary
+        run: |
+          docker exec primary ipa ca-add subca --subject cn=subca,O=EXAMPLE.COM
+          docker exec primary ipa ca-find | tee output-primary
+          docker exec secondary ipa ca-find | tee output-secondary
+          diff output-primary output-secondary
+          echo "Number of entries returned 2" > expected
+          grep "Number of entries returned" output-secondary > actual
+          diff expected actual
+
+      - name: Remove subca from clone
+        run: |
+          docker exec secondary ipa ca-disable subca
+          docker exec secondary ipa ca-del subca
+          docker exec secondary ipa ca-find | tee output-secondary
+          docker exec primary ipa ca-find | tee output-primary
+          diff output-primary output-secondary
+          echo "Number of entries returned 1" > expected
+          grep "Number of entries returned" output-primary > actual
+          diff expected actual
+
       - name: Remove IPA server from primary container
         run: |
           docker exec secondary ipa server-del primary.example.com